Unable to determine if a user session should be SSL-only

[skitterm]

When authenticating with the OAuth implicit grant, a ssl=true key-value pair is returned as part of the OAuth callback's hash, when the organization is HTTPS-only. Based on that I can adjust everything to be strictly HTTPS when the organization requires it.

However, when calling userSession.toCredential(), ssl is always true.

Unless I'm mistaken, that makes it impossible to determine whether or not a session should be SSL-only (without manually reading the oauth callback hash for that value, of course).

Newbie idea, but a way to let userSession know if ssl should be true || false would be to allow passing it in as a parameter in completeOAuth2()?

[tomwayson]

I think the way to do that would be to add add a ssl: boolean prop to UserSession and UserSessionOptions and then as you say add it here:

arcgis-rest-js/packages/arcgis-rest-auth/src/UserSession.ts

Line 430 in af61e3e

return new UserSession({

Then update toCredential() to pull from that value.

I'd gladly accept such a pull request 😄

[skitterm]

PR submitted: #332

[jgravois]

resolved via #332. thanks again @skitterm 🎉